SMART: Robust and Efficient Fine-Tuning for Pre-trained Natural Language Models through Principled Regularized Optimization
Not on the map. Why?
Abstract (arXiv)
Transfer learning has fundamentally changed the landscape of natural language processing (NLP) research. Many existing state-of-the-art models are first pre-trained on a large text corpus and then fine-tuned on downstream tasks. However, due to limited data resources from downstream tasks and the extremely large capacity of pre-trained models, aggressive fine-tuning often causes the adapted model to overfit the data of downstream tasks and forget the knowledge of the pre-trained model. To address the above issue in a more principled manner, we propose a new computational framework for robust and efficient fine-tuning for pre-trained language models. Specifically, our proposed framework contains two important ingredients: 1. Smoothness-inducing regularization, which effectively manages the capacity of the model; 2. Bregman proximal point optimization, which is a class of trust-region methods and can prevent knowledge forgetting. Our experiments demonstrate that our proposed method achieves the state-of-the-art performance on multiple NLP benchmarks.
Key facts. Cited by 253 papers in the map (data through 7 Oct 2026). First posted on arXiv 8 Nov 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 61; 2022: 67; 2023: 61; 2024: 37; 2025: 17; 2026: 10.
253 papers.
Sort:
By area:
- 2021Robust fine-tuning of zero-shot modelscited by 785
- 2022Fine-Tuning can Distort Pretrained Features and Underperform Out-of-Distributioncited by 722
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Uglycited by 380
- 2022Selective Annotation Makes Language Models Better Few-Shot Learnerscited by 242
- 2022GatorTron: A Large Clinical Language Model to Unlock Patient Information from Unstructured Electronic Health Recordscited by 238
- 2021Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Modelscited by 227
- 2022Surgical Fine-Tuning Improves Adaptation to Distribution Shiftscited by 205
- 2024A Survey on Recent Advances in LLM-Based Multi-turn Dialogue Systemscited by 170
- 2024Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMscited by 158
- 2022Finetune like you pretrain: Improved finetuning of zero-shot vision modelscited by 149
- 2021On the Effectiveness of Adapter-based Tuning for Pretrained Language Model Adaptationcited by 147
- 2021Raise a Child in Large Language Model: Towards Effective and Generalizable Fine-tuningcited by 145
38 more
- 2022On the Effectiveness of Parameter-Efficient Fine-Tuningcited by 140
- 2023Domain Specialization as the Key to Make Large Language Models Disruptive: A Comprehensive Surveycited by 134
- 2023MiniLLM: On-Policy Distillation of Large Language Modelscited by 129
- 2024Black-Box Access is Insufficient for Rigorous AI Auditscited by 123
- 2021Taming Sparsely Activated Transformer with Stochastic Expertscited by 112
- 2021A Survey on Data Augmentation for Text Classificationcited by 111
- 2021Sharpness-Aware Minimization Improves Language Model Generalizationcited by 108
- 2021Measure and Improve Robustness in NLP Models: A Surveycited by 107
- 2024Efficient Adversarial Training in LLMs with Continuous Attackscited by 104
- 2021Self-Guided Contrastive Learning for BERT Sentence Representationscited by 103
- 2021An Empirical Survey of Data Augmentation for Limited Data Learning in NLPcited by 101
- 2022State-of-the-art generalisation research in NLP: A taxonomy and reviewcited by 97
- 2024Soft Prompt Threats: Attacking Safety Alignment and Unlearning in Open-Source LLMs through the Embedding Spacecited by 88
- 2024Defending Against Unforeseen Failure Modes with Latent Adversarial Trainingcited by 82
- 2021Towards Improving Adversarial Training of NLP Modelscited by 79
- 2023AfriSenti: A Twitter Sentiment Analysis Benchmark for African Languagescited by 68
- 2024Robust LLM safeguarding via refusal feature adversarial trainingcited by 60
- 2022Uni-Perceiver-MoE: Learning Sparse Generalist Models with Conditional MoEscited by 58
- 2021Fine-Tuning Large Neural Language Models for Biomedical Natural Language Processingcited by 57
- 2022Transferability in Deep Learning: A Surveycited by 57
- 2022Debiased Contrastive Learning of Unsupervised Sentence Representationscited by 56
- 2021CLINE: Contrastive Learning with Semantic Negative Examples for Natural Language Understandingcited by 50
- 2021AutoFreeze: Automatically Freezing Model Blocks to Accelerate Fine-tuningcited by 48
- 2021Playing Lottery Tickets with Vision and Languagecited by 45
- 2021Mengzi: Towards Lightweight yet Ingenious Pre-trained Models for Chinesecited by 45
- 2022NoisyTune: A Little Noise Can Help You Finetune Pretrained Language Models Bettercited by 43
- 2021UnitedQA: A Hybrid Approach for Open Domain Question Answeringcited by 42
- 2021Consistency Regularization for Cross-Lingual Fine-Tuningcited by 41
- 2023SemEval-2023 Task 12: Sentiment Analysis for African Languages (AfriSenti-SemEval)cited by 41
- 2021Human Parity on CommonsenseQA: Augmenting Self-Attention with External Attentioncited by 40
- 2023Trained on 100 million words and still in shape: BERT meets British National Corpuscited by 39
- 2022Is Neuro-Symbolic AI Meeting its Promise in Natural Language Processing? A Structured Reviewcited by 37
- 2021SGD-X: A Benchmark for Robust Generalization in Schema-Guided Dialogue Systemscited by 34
- 2023Cross-Modal Fine-Tuning: Align then Refinecited by 34
- 2021STraTA: Self-Training with Task Augmentation for Better Few-shot Learningcited by 33
- 2023Prompt Optimization via Adversarial In-Context Learningcited by 33
- 2021HiddenCut: Simple Data Augmentation for Natural Language Understanding with Better Generalizationcited by 31
- 2021Defending Pre-trained Language Models from Adversarial Word Substitutions Without Performance Sacrificecited by 30
50 most cited of 253 All 253 (JSON)
- 2026Open Your Model's Eyes: Video and Context-Aware Multimodal Backchannel Prediction22 Jul 2026
- 2026Small Data, Big Noise: Adversarial Training for Robust Parameter-Efficient Fine-Tuning9 Jun 2026
- 2026Cheap Reward Hacking Detection8 Jun 2026
- 2026AutoTail-BSFGM: Class-Balance-Aware Fine-Tuning for Chinese Scholarly Text Classification2 Jun 2026
- 2026Repurposing Adversarial Perturbations for Continual Learning: From Defense to Active Alignment1 Jun 2026
- 2026FragileFlow: Spectral Control of Correct-but-Fragile Predictions for Foundation Model Robustness9 May 2026
- 2026Beyond LoRA vs. Full Fine-Tuning: Gradient-Guided Optimizer Routing for LLM Adaptation8 May 2026
- 2026Where Do Prompt Perturbations Break Generation? A Segment-Level View of Robustness in LoRA-Tuned Language Models2 May 2026
- 2026Augmenting Parameter-Efficient Pre-trained Language Models with Large Language Models19 Jan 2026
- 2026Graph Inference Towards ICD Coding12 Jan 2026
- 2025Advances and Challenges in Semantic Textual Similarity: A Comprehensive Survey19 Dec 2025
- 2025How Noise Benefits AI-generated Image Detection20 Nov 2025
38 more
- 2025Beyond One-Size-Fits-All: Personalized Harmful Content Detection with In-Context Learning29 Oct 2025
- 2025RanAT4BIE: Random Adversarial Training for Biomedical Information Extraction14 Sep 2025
- 2025PRM-Free Security Alignment of Large Models via Red Teaming and Adversarial Training14 Jul 2025
- 2025NEU-ESC: A Comprehensive Vietnamese dataset for Educational Sentiment analysis and topic Classification toward multitask learning30 Jun 2025
- 2025Intended Target Identification for Anomia Patients with Gradient-based Selective Augmentation17 Jun 2025
- 2025Evaluating the performance and fragility of large language models on the self-assessment for neurological surgeons29 May 2025
- 2025GenoArmory: A Unified Evaluation Framework for Adversarial Attacks on Genomic Foundation Models16 May 2025
- 2025Adaptive Latent-Space Constraints in Personalized Federated Learning12 May 2025
- 2025IM-BERT: Enhancing Robustness of BERT through the Implicit Euler Method11 May 2025
- 2025Fine-tuning BERT with Bidirectional LSTM for Fine-grained Movie Reviews Sentiment Analysis28 Feb 2025
- 2025Sentiment Analysis of Movie Reviews Using BERT26 Feb 2025
- 2025Improved Diffusion-based Generative Model with Better Adversarial Robustness24 Feb 2025
- 2025MorphNLI: A Stepwise Approach to Natural Language Inference Using Text Morphing13 Feb 2025
- 2025Do we really have to filter out random noise in pre-training data for language models?10 Feb 2025
- 2025Enhancing Generalization in Chain of Thought Reasoning for Smaller Models16 Jan 2025
- 2024Learning from Mistakes: Self-correct Adversarial Training for Chinese Unnatural Text Correction23 Dec 2024
- 2024First Train to Generate, then Generate to Train: UnitedSynT5 for Few-Shot NLI12 Dec 2024
- 2024Effectiveness of Distributed Gradient Descent with Local Steps for Overparameterized Models10 Dec 2024
- 2024On the effective transfer of knowledge from English to Hindi Wikipedia7 Dec 2024
- 2024Dual Risk Minimization: Towards Next-Level Robustness in Fine-tuning Zero-Shot Models29 Nov 2024
- 2024CausalDiff: Causality-Inspired Disentanglement via Diffusion Model for Adversarial Defense30 Oct 2024
- 2024Unifying Economic and Language Models for Enhanced Sentiment Analysis of the Oil Market16 Oct 2024
- 2024Text Classification using Graph Convolutional Networks: A Comprehensive Survey12 Oct 2024
- 2024Impeding LLM-assisted Cheating in Introductory Programming Assignments via Adversarial Perturbation12 Oct 2024
- 2024Auto-GDA: Automatic Domain Adaptation for Efficient Grounding Verification in Retrieval-Augmented Generation4 Oct 2024
- 2024Robust LLM safeguarding via refusal feature adversarial training30 Sep 2024
- 2024Classifier Guidance Enhances Diffusion-based Adversarial Purification by Preserving Predictive Information12 Aug 2024
- 2024Contribution-based Low-Rank Adaptation with Pre-training Model for Real Image Restoration2 Aug 2024
- 2024Leveraging Encoder-only Large Language Models for Mobile App Review Feature Extraction2 Aug 2024
- 2024Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs22 Jul 2024
- 2024MaskPure: Improving Defense Against Text Adversaries with Stochastic Purification18 Jun 2024
- 2024GAMedX: Generative AI-based Medical Entity Data Extractor Using Large Language Models31 May 2024
- 2024Online Merging Optimizers for Boosting Rewards and Mitigating Tax in Alignment28 May 2024
- 2024Understanding Linear Probing then Fine-tuning Language Models from NTK Perspective27 May 2024
- 2024Efficient Adversarial Training in LLMs with Continuous Attacks24 May 2024
- 2024QLSC: A Query Latent Semantic Calibrator for Robust Extractive Question Answering30 Apr 2024
- 2024Generalization Measures for Zero-Shot Cross-Lingual Transfer24 Apr 2024
- 2024Perturbing Attention Gives You More Bang for the Buck: Subtle Imaging Perturbations That Efficiently Fool Customized Diffusion Models23 Apr 2024
50 newest of 253 All 253 (JSON)
- 2024Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMscited by 158
- 2024Efficient Adversarial Training in LLMs with Continuous Attackscited by 104
- 2024Defending Against Unforeseen Failure Modes with Latent Adversarial Trainingcited by 82
- 2021Defending Against Backdoor Attacks in Natural Language Generationcited by 30
- 2023Training-free Lexical Backdoor Attacks on Language Modelscited by 27
- 2024Rapid Optimization for Jailbreaking LLMs via Subconscious Exploitation and Echopraxiacited by 12
- 2025Beyond One-Size-Fits-All: Personalized Harmful Content Detection with In-Context Learningcited by 0
- 2025Beyond One-Size-Fits-All: Personalized Harmful Content Detection with In-Context Learning29 Oct 2025
- 2024Latent Adversarial Training Improves Robustness to Persistent Harmful Behaviors in LLMs22 Jul 2024
- 2024Efficient Adversarial Training in LLMs with Continuous Attacks24 May 2024
- 2024Defending Against Unforeseen Failure Modes with Latent Adversarial Training8 Mar 2024
- 2024Rapid Optimization for Jailbreaking LLMs via Subconscious Exploitation and Echopraxia8 Feb 2024
- 2023Training-free Lexical Backdoor Attacks on Language Models8 Feb 2023
- 2021Defending Against Backdoor Attacks in Natural Language Generation3 Jun 2021
- 2024Soft Prompt Threats: Attacking Safety Alignment and Unlearning in Open-Source LLMs through the Embedding Spacecited by 88
- 2024Online Merging Optimizers for Boosting Rewards and Mitigating Tax in Alignmentcited by 28
- 2025PRM-Free Security Alignment of Large Models via Red Teaming and Adversarial Trainingcited by 1
- 2026Cheap Reward Hacking Detectioncited by 0
- 2026Cheap Reward Hacking Detection8 Jun 2026
- 2025PRM-Free Security Alignment of Large Models via Red Teaming and Adversarial Training14 Jul 2025
- 2024Online Merging Optimizers for Boosting Rewards and Mitigating Tax in Alignment28 May 2024
- 2024Soft Prompt Threats: Attacking Safety Alignment and Unlearning in Open-Source LLMs through the Embedding Space14 Feb 2024
- 2024Perturbing Attention Gives You More Bang for the Buck: Subtle Imaging Perturbations That Efficiently Fool Customized Diffusion Modelscited by 18
- 2024Classifier Guidance Enhances Diffusion-based Adversarial Purification by Preserving Predictive Informationcited by 5
- 2024CausalDiff: Causality-Inspired Disentanglement via Diffusion Model for Adversarial Defensecited by 4
- 2025Improved Diffusion-based Generative Model with Better Adversarial Robustnesscited by 3
- 2025Improved Diffusion-based Generative Model with Better Adversarial Robustness24 Feb 2025
- 2024CausalDiff: Causality-Inspired Disentanglement via Diffusion Model for Adversarial Defense30 Oct 2024
- 2024Classifier Guidance Enhances Diffusion-based Adversarial Purification by Preserving Predictive Information12 Aug 2024
- 2024Perturbing Attention Gives You More Bang for the Buck: Subtle Imaging Perturbations That Efficiently Fool Customized Diffusion Models23 Apr 2024
- 2022Is Neuro-Symbolic AI Meeting its Promise in Natural Language Processing? A Structured Reviewcited by 37
- 2025Enhancing Generalization in Chain of Thought Reasoning for Smaller Modelscited by 5
- 2023Rethinking the Construction of Effective Metrics for Understanding the Mechanisms of Pretrained Language Modelscited by 0
- 2025Enhancing Generalization in Chain of Thought Reasoning for Smaller Models16 Jan 2025
- 2023Rethinking the Construction of Effective Metrics for Understanding the Mechanisms of Pretrained Language Models19 Oct 2023
- 2022Is Neuro-Symbolic AI Meeting its Promise in Natural Language Processing? A Structured Review24 Feb 2022
- 2021Robust fine-tuning of zero-shot modelscited by 785
- 2022Fine-Tuning can Distort Pretrained Features and Underperform Out-of-Distributioncited by 722
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Uglycited by 380
- 2022Selective Annotation Makes Language Models Better Few-Shot Learnerscited by 242
- 2022GatorTron: A Large Clinical Language Model to Unlock Patient Information from Unstructured Electronic Health Recordscited by 238
- 2021Adversarial GLUE: A Multi-Task Benchmark for Robustness Evaluation of Language Modelscited by 227
- 2022Surgical Fine-Tuning Improves Adaptation to Distribution Shiftscited by 205
- 2024A Survey on Recent Advances in LLM-Based Multi-turn Dialogue Systemscited by 170
- 2022Finetune like you pretrain: Improved finetuning of zero-shot vision modelscited by 149
- 2021On the Effectiveness of Adapter-based Tuning for Pretrained Language Model Adaptationcited by 147
- 2021Raise a Child in Large Language Model: Towards Effective and Generalizable Fine-tuningcited by 145
- 2022On the Effectiveness of Parameter-Efficient Fine-Tuningcited by 140
12 most cited of 228 All 228 (JSON)
- 2026Open Your Model's Eyes: Video and Context-Aware Multimodal Backchannel Prediction22 Jul 2026
- 2026Small Data, Big Noise: Adversarial Training for Robust Parameter-Efficient Fine-Tuning9 Jun 2026
- 2026AutoTail-BSFGM: Class-Balance-Aware Fine-Tuning for Chinese Scholarly Text Classification2 Jun 2026
- 2026Repurposing Adversarial Perturbations for Continual Learning: From Defense to Active Alignment1 Jun 2026
- 2026FragileFlow: Spectral Control of Correct-but-Fragile Predictions for Foundation Model Robustness9 May 2026
- 2026Beyond LoRA vs. Full Fine-Tuning: Gradient-Guided Optimizer Routing for LLM Adaptation8 May 2026
- 2026Where Do Prompt Perturbations Break Generation? A Segment-Level View of Robustness in LoRA-Tuned Language Models2 May 2026
- 2026Augmenting Parameter-Efficient Pre-trained Language Models with Large Language Models19 Jan 2026
- 2026Graph Inference Towards ICD Coding12 Jan 2026
- 2025Advances and Challenges in Semantic Textual Similarity: A Comprehensive Survey19 Dec 2025
- 2025How Noise Benefits AI-generated Image Detection20 Nov 2025
- 2025RanAT4BIE: Random Adversarial Training for Biomedical Information Extraction14 Sep 2025
12 newest of 228 All 228 (JSON)